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NATIONAL SITUATIONAL INFORMATION REPORT 
FEDERAL BUREAU OF INVESTIGATION 

Activity Alert 

CRIMINAL INVESTIGATIVE DIVISION 
SACRAMENTO DIVISION 


(U) Approved for Release: 

(U) SIR Number: NSIR-00328015082 

(U//FOUO) Unidentified Darknet User(s) Sent Personally Identifiable Information of 
Federal Law Enforcement Officials to Darknet Website Administrators 

(U) Source: An anonymous tip reported to a monitored FBI e-mail account. 

(U//LES) The purpose of this National Situational Information Report is to advise law enforcement personnel 
and public safety officials about threats to life by unidentified Darknet user(s) using the name DEEPSTATE. 


(U) LAW ENFORCEMENT SENSITIVE: The information marked (U//LES) in this document is the property of the Federal 
Bureau of Investigation and may be distributed within the federal government (and its contractors), US intelligence, 
law enforcement, public safety, or protection officials and individuals with a need to know. Distribution beyond 
these entities without FBI authorization is prohibited. Precautions should be taken to ensure this information is 
stored and/or destroyed in a manner that precludes unauthorized access. Information bearing the LES caveat may 
not be used in legal proceedings without first receiving authorization from the originating agency. Recipients are 
prohibited from subsequently posting the information marked LES on a website on an unclassified network without 
first obtaining FBI approval. 

(U) Warning: This is an information report, not finally evaluated intelligence. It is being shared for informational 
purposes but has not been fully evaluated, integrated with other information, interpreted or analyzed. Receiving 
agencies are requested not to take action based on this raw reporting without prior coordination with the FBI. 

(U) Note: This product reflects the views of the SACRAMENTO DIVISION and CRIMINAL INVESTIGATIVE DIVISION. 
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(U//LES) Based on reporting from 2018, Darknet user(s) sent personally identifiable information (PII) of six 
current and former federal LEOs to multiple administrators of Darknet marketplaces. The sender(s), using the 
name DEEPSTATE, also threatened to kill the LEOs, stating the first murder would occur within 18 months of 
the initial send date of the message. The LEOs in the message are publically linked to investigations involving 
the Darknet. 

(U//LES) The sender(s) also instructed the recipients of the PII to implicate the LEOs in various activities in the 
following ways: 

• (U//LES) Register Darknet marketplace servers in the names of the LEOs 

• (U//LES) Deposit traceable drug money into offshore bank accounts and list the LEOs as beneficiaries 

• (U//LES) Use the LEOs’ addresses as return addresses on mail 

• (U//LES) Register companies in the LEOs’ names and use those companies to launder money 

• (U//LES) Open cryptocurrency exchange accounts in the LEOs’ names and use them to launder money 

• (U//LES) Use the LEO’s identities in international arms trade transactions 

• (U//LES) Message chemical vendors on guidechem.com, asking for fentanyl precursor quotes 

• (U//LES) Write letters to Iranian, Russian, and North Korean embassies in the LEOs’ names discussing 
centrifuges 

• (U//LES) Register domain names and web hosting services in the LEOs’ names and post WikiLeaks 
content to the sites 

• (U//LES) Use aliases that appear to belong to the LEOs when posting online 

• (U//LES) Mail free computer equipment with backdoors installed to the LEOs and use the compromised 
equipment’s Internet Protocol address to log into the Darknet marketplaces. 

(U//LES) FBI Comment: The Darknet is a portion of the Internet that can be accessed only by using 
specialized software. The most common software used to access the Darknet is Tor, formerly known as The 
Onion Router. Darknet marketplaces are used to buy and sell illicit goods such as drugs, weapons, and 
falsified identification documents. Darknet marketplaces include sites such as the Silk Road and AlphaBay. 
Administrators manage the hardware and software used to run Darknet marketplaces. 

(U//LES) FBI Comment: This information is from an unknown date in 2018. An anonymous individual sent 
it to the FBI on 23 June 2019. 

(U//LES) FBI Comment: According to the information provided to the FBI, DEEPSTATE claims to be an 
intelligence entity set up to protect Darknet Marketplace administrators from arrest and extended prison 
sentences. The self-described group claims to have conducted surveillance on one of the identified federal 
agents. 

(U//LES) FBI Comment: According to open source searches, guidechem.com is a China-based e-commerce 
website that allows buyers and sellers to trade chemical products globally. 


(U) This report has been prepared by FBI Sacramento and the Criminal Investigative Division of the FBI. 
Comments and queries may be addressed to the Criminal Investigative Division at 202-324-8779. 
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Distribution 


ALL FBI FIELD OFFICES 

ALL FUSION CENTERS 

LAW ENFORCEMENT ENTERPRISE PORTAL 

INTELLINK-U 
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FBI Customer Satisfaction Survey 


Please take a moment to complete this survey and help evaluate the quality, value, and relevance of our product. 

Your response will help us serve you more effectively and efficiently in the future. Thank you for your cooperation and 
assistance. Please return to: 

Federal Bureau of Investigation 
CRIMINAL INVESTIGATIVE DIVISION 

Customer and Product Information 

SIR Tracking ID: NSIR-00328015082 

Product Title: Unidentified Darknet User(s) Sent Personally Identifiable Information of Federal Law 
Enforcement Officials to Darknet Website Administrators 

Dated:_ 

Customer Agency:_ 

Relevance to Your Intelligence Needs 

1. The product increased my knowledge of an issue or topic. (Check one) 

_5. Strongly Agree 

_4. Somewhat Agree 

_3. Neither Agree or Disagree 

_2. Somewhat Disagree 

_1. Strongly Disagree 

Actionable Value 

2. The product helped me decide on a course of action. (Check one) 

_5. Strongly Agree 

_4. Somewhat Agree 

_3. Neither Agree or Disagree 

_2. Somewhat Disagree 

_1. Strongly Disagree 

Timeliness Value 

3. The product was timely to my needs. (Check one) 

_5. Strongly Agree 

_4. Somewhat Agree 

_3. Neither Agree or Disagree 

_2. Somewhat Disagree 

_1. Strongly Disagree 

Comments (please use reverse or attach separate page if needed): 
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